Sign in

Not rated

CVE-2020-10625 WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account

Description

WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.

Affected products and versions

Product	Affected versions	Fixed in
WebAccess/NMS	Versions not published

The 8 CVEs of WebAccess/NMS →

CVE-2020-10619 An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2)… Not rated CVE-2020-10629 WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input Not rated CVE-2020-10603 WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system… Not rated CVE-2020-10631 An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to… Not rated

Do you use WebAccess/NMS?

Track this CVE Watch WebAccess/NMS Check my SBOMs

cveye.io/en/cve/CVE-2020-10625

Timeline

Published April 9, 2020
Last modified August 4, 2024

References

www.us-cert.gov www.us-cert.gov

Track this CVE